AverageMarcus/cluster.fun
1
0
Fork 0
Code Issues 1 Pull Requests 3 Releases Activity

Update gristlabs/grist-oss Docker tag to v1.7.14 #715

Merged
AverageMarcus merged 1 commits from renovate/gristlabs-grist-oss-1.x into master 2026-05-30 05:35:41 +00:00
Conversation 0 Commits 1 Files Changed 1
+1 -1
renovate commented 2026-05-29 03:21:39 +00:00
Collaborator
Copy Link
Copy Source

This PR contains the following updates:

Package Update Change
gristlabs/grist-oss patch 1.7.13 → 1.7.14

Release Notes

gristlabs/grist-core (gristlabs/grist-oss)

v1.7.14

Compare Source

What's Changed

The first-run experience for self-hosted installations matures. The setup wizard previewed last release is now the default flow a fresh install lands on. It checks earlier which formula sandboxes are available, handles authentication changes more cleanly, and lets you edit the install-wide default permissions from the Admin Panel. Accessibility takes a big step forward too: screen-reader support and keyboard navigation now reach grid views, menus, and the page widget picker. There are also new date formats, a POST /records/list API endpoint for large queries, custom CSS inside widgets, and the usual dependency bumps and fixes. Two more features are under development in the full edition: OAuth Apps and an MCP (Model Context Protocol) endpoint. See "Full Grist edition extensions" below.

New features
  • Guided first-run setup wizard. The setup wizard previewed in v1.7.13 is now the flow fresh self-hosted installations land on. Sign in with the boot key (the GRIST_BOOT_KEY admin secret printed at startup), and the wizard walks you through /admin/setup to configure your instance. The "Quick setup" entry is now active in the admin sidebar. Refinements this release:
    • The wizard now checks which formula sandboxes are available as soon as it opens, not when you reach that step. No more waiting on a spinner (#​2341)
    • Smoother entry into the wizard: cleaner redirects after an authentication change and after signing in with the boot key (#​2340)
    • Set up "Sign in with getgrist.com" from the wizard, and returning from getgrist.com's registration page now brings you back into the wizard, not the main Admin Panel (#​2310)
    • Signed-out and non-admin users can no longer open the Quick setup page. They get the same "unavailable" card as the Admin Panel (#​2323)
    • Authentication changes are now staged like the wizard's other pending changes. Admins are sent back through sign-in after changing them (#​2315, #​2331)
    • The four install-wide default permissions (team sites, personal sites, anonymous access, anonymous playground) can now be changed from the Admin Panel's Security Settings, not just during the wizard (#​2314)
  • POST /records/list endpoint. A POST companion to the records endpoint. Large queries can be sent in the request body instead of the URL (#​2321).
Improvements
  • Accessibility (contributed by @​manuhabitela)
    • Screen-reader support in grid views (#​2114)
    • Open the row and column menus via keyboard shortcuts in a grid view (#​2230)
    • Open the context menu via keyboard shortcuts when in widgets (#​2226)
    • Page widget picker now works with keyboard and screen readers (#​2273)
  • Custom widgets
    • A custom CSS file configured with APP_STATIC_INCLUDE_CUSTOM_CSS is now also applied inside widgets, not just the main app. Contributed by @​manuhabitela (#​2089)
    • The built-in calendar widget now loads from the copy bundled with Grist instead of the one hosted on GitHub. The GitHub copy pulled in external CDN files that ad blockers and privacy extensions sometimes blocked (#​2262)
  • Localization
    • New date formats (#​2347)
    • Improved locale guessing and locale fallback logic (#​2313)
  • API
    • Action summaries (the change summaries used by features such as webhooks) now mark which cell values are genuinely unknown. Before, merging two summaries could replace a known value with a wildcard. Now it keeps the real value where it has one (#​2361)
  • Internal / infrastructure
    • Added a filesystem-based document storage backend for tests, enabled with GRIST_FS_STORAGE_DIR. It implements Grist's external storage interface, normally backed by S3-compatible object storage (commit). It also gets a (test-only) card in the Admin Panel backups section (commit)
Fixes
  • Edit a document from the assistant popup, and Grist now copies (forks) it first if it is a template or an unsaved scratch document ("fiddle"). The original is no longer changed in place (commit)
  • Fixed a case where editing through the assistant could slip past access checks. It happened while previewing a document as owner, before the fork was made, and could leave the data engine in a bad state (commit)
  • Prevent anonymous users from forking documents (#​2319)
  • On first startup, the /status health check now returns "starting" (HTTP 503) until the server is ready. Before, it could report healthy too early (#​2322)
  • Prevent a console error when pressing ctrl+alt+o on the homepage (#​2343)
Documentation
Full Grist edition extensions

These features are under development in the full edition.

  • OAuth Apps. A way to register and manage OAuth apps, with a developer UI and REST API. Users can authorize an app, limit it to specific organizations, workspaces, or documents, and later review or revoke that access.
  • MCP (Model Context Protocol) endpoint. Lets external clients such as Claude or ChatGPT talk to Grist over JSON-RPC.
Dependency bumps

Thanks to the grist.gouv team for monitoring Grist dependencies.

Contributions

Translations
  • Arif Budiman
  • Igor Freire Rodrigues
  • Kévin DUPOND
  • Martin Harari Thuresson
  • Paul Janzen
  • Renato Portela
  • René Neumann
  • ssantos
  • xabirequejo
  • younger

Full Changelog: https://github.com/gristlabs/grist-core/compare/v1.7.13...v1.7.14

Join our Discord Community if you'd like to get into development of Grist.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [gristlabs/grist-oss](https://github.com/gristlabs/grist-core) | patch | `1.7.13` → `1.7.14` | --- ### Release Notes <details> <summary>gristlabs/grist-core (gristlabs/grist-oss)</summary> ### [`v1.7.14`](https://github.com/gristlabs/grist-core/releases/tag/v1.7.14) [Compare Source](https://github.com/gristlabs/grist-core/compare/v1.7.13...v1.7.14) #### What's Changed The first-run experience for self-hosted installations matures. The setup wizard previewed last release is now the default flow a fresh install lands on. It checks earlier which formula sandboxes are available, handles authentication changes more cleanly, and lets you edit the install-wide default permissions from the Admin Panel. Accessibility takes a big step forward too: screen-reader support and keyboard navigation now reach grid views, menus, and the page widget picker. There are also new date formats, a `POST /records/list` API endpoint for large queries, custom CSS inside widgets, and the usual dependency bumps and fixes. Two more features are under development in the full edition: **OAuth Apps** and an **MCP (Model Context Protocol) endpoint**. See "Full Grist edition extensions" below. ##### New features - **[Guided first-run setup wizard](https://support.getgrist.com/install/first-run-setup/)**. The setup wizard previewed in v1.7.13 is now the flow fresh self-hosted installations land on. Sign in with the boot key (the `GRIST_BOOT_KEY` admin secret printed at startup), and the wizard walks you through `/admin/setup` to configure your instance. The "Quick setup" entry is now active in the admin sidebar. Refinements this release: - The wizard now checks which formula sandboxes are available as soon as it opens, not when you reach that step. No more waiting on a spinner ([#&#8203;2341](https://github.com/gristlabs/grist-core/issues/2341)) - Smoother entry into the wizard: cleaner redirects after an authentication change and after signing in with the boot key ([#&#8203;2340](https://github.com/gristlabs/grist-core/issues/2340)) - Set up "Sign in with getgrist.com" from the wizard, and returning from getgrist.com's registration page now brings you back into the wizard, not the main Admin Panel ([#&#8203;2310](https://github.com/gristlabs/grist-core/issues/2310)) - Signed-out and non-admin users can no longer open the Quick setup page. They get the same "unavailable" card as the Admin Panel ([#&#8203;2323](https://github.com/gristlabs/grist-core/issues/2323)) - Authentication changes are now staged like the wizard's other pending changes. Admins are sent back through sign-in after changing them ([#&#8203;2315](https://github.com/gristlabs/grist-core/issues/2315), [#&#8203;2331](https://github.com/gristlabs/grist-core/issues/2331)) - The four install-wide default permissions (team sites, personal sites, anonymous access, anonymous playground) can now be changed from the Admin Panel's Security Settings, not just during the wizard ([#&#8203;2314](https://github.com/gristlabs/grist-core/issues/2314)) - **`POST /records/list` endpoint**. A POST companion to the records endpoint. Large queries can be sent in the request body instead of the URL ([#&#8203;2321](https://github.com/gristlabs/grist-core/issues/2321)). ##### Improvements - [Accessibility](https://support.getgrist.com/accessibility/) (contributed by [@&#8203;manuhabitela](https://github.com/manuhabitela)) - Screen-reader support in grid views ([#&#8203;2114](https://github.com/gristlabs/grist-core/issues/2114)) - Open the row and column menus via keyboard shortcuts in a grid view ([#&#8203;2230](https://github.com/gristlabs/grist-core/issues/2230)) - Open the context menu via keyboard shortcuts when in widgets ([#&#8203;2226](https://github.com/gristlabs/grist-core/issues/2226)) - Page widget picker now works with keyboard and screen readers ([#&#8203;2273](https://github.com/gristlabs/grist-core/issues/2273)) - Custom widgets - A custom CSS file configured with `APP_STATIC_INCLUDE_CUSTOM_CSS` is now also applied inside widgets, not just the main app. Contributed by [@&#8203;manuhabitela](https://github.com/manuhabitela) ([#&#8203;2089](https://github.com/gristlabs/grist-core/issues/2089)) - The built-in calendar widget now loads from the copy bundled with Grist instead of the one hosted on GitHub. The GitHub copy pulled in external CDN files that ad blockers and privacy extensions sometimes blocked ([#&#8203;2262](https://github.com/gristlabs/grist-core/issues/2262)) - Localization - New date formats ([#&#8203;2347](https://github.com/gristlabs/grist-core/issues/2347)) - Improved locale guessing and locale fallback logic ([#&#8203;2313](https://github.com/gristlabs/grist-core/issues/2313)) - API - Action summaries (the change summaries used by features such as webhooks) now mark which cell values are genuinely unknown. Before, merging two summaries could replace a known value with a wildcard. Now it keeps the real value where it has one ([#&#8203;2361](https://github.com/gristlabs/grist-core/issues/2361)) - Internal / infrastructure - Added a filesystem-based document storage backend for tests, enabled with `GRIST_FS_STORAGE_DIR`. It implements Grist's external storage interface, normally backed by S3-compatible object storage ([commit](https://github.com/gristlabs/grist-core/commit/a1515c26)). It also gets a (test-only) card in the Admin Panel backups section ([commit](https://github.com/gristlabs/grist-core/commit/a1db24bf)) ##### Fixes - Edit a document from the assistant popup, and Grist now copies (forks) it first if it is a template or an unsaved scratch document ("fiddle"). The original is no longer changed in place ([commit](https://github.com/gristlabs/grist-core/commit/69e26019)) - Fixed a case where editing through the assistant could slip past access checks. It happened while previewing a document as owner, before the fork was made, and could leave the data engine in a bad state ([commit](https://github.com/gristlabs/grist-core/commit/b4a90b10)) - Prevent anonymous users from forking documents ([#&#8203;2319](https://github.com/gristlabs/grist-core/issues/2319)) - On first startup, the `/status` health check now returns "starting" (HTTP 503) until the server is ready. Before, it could report healthy too early ([#&#8203;2322](https://github.com/gristlabs/grist-core/issues/2322)) - Prevent a console error when pressing ctrl+alt+o on the homepage ([#&#8203;2343](https://github.com/gristlabs/grist-core/issues/2343)) ##### Documentation - New [accessibility documentation](https://support.getgrist.com/accessibility/) covering keyboard navigation, screen reader support, and the high-contrast theme. Contributed by [@&#8203;manuhabitela](https://github.com/manuhabitela) - Document how to run the browser-based end-to-end (nbrowser) tests locally ([#&#8203;2214](https://github.com/gristlabs/grist-core/issues/2214)) ##### Full Grist edition extensions These features are under development in the full edition. - **OAuth Apps**. A way to register and manage OAuth apps, with a developer UI and REST API. Users can authorize an app, limit it to specific organizations, workspaces, or documents, and later review or revoke that access. - **MCP (Model Context Protocol) endpoint**. Lets external clients such as Claude or ChatGPT talk to Grist over JSON-RPC. ##### Dependency bumps Thanks to the grist.gouv team for monitoring Grist dependencies. - Bump [@&#8203;gristlabs/grist-widget](https://github.com/gristlabs/grist-widget) to 0.0.6 ([#&#8203;2329](https://github.com/gristlabs/grist-core/issues/2329)), file-type to 22.0.0 ([#&#8203;2209](https://github.com/gristlabs/grist-core/issues/2209)), uuid to 14.0.0 ([#&#8203;2290](https://github.com/gristlabs/grist-core/issues/2290)) - Bump axios ([#&#8203;2260](https://github.com/gristlabs/grist-core/issues/2260), [#&#8203;2333](https://github.com/gristlabs/grist-core/issues/2333)), webpack-dev-server ([#&#8203;2357](https://github.com/gristlabs/grist-core/issues/2357)), ws ([#&#8203;2359](https://github.com/gristlabs/grist-core/issues/2359)), multiparty ([#&#8203;2355](https://github.com/gristlabs/grist-core/issues/2355)), fast-uri ([#&#8203;2342](https://github.com/gristlabs/grist-core/issues/2342)), basic-ftp ([#&#8203;2274](https://github.com/gristlabs/grist-core/issues/2274), [#&#8203;2338](https://github.com/gristlabs/grist-core/issues/2338)), node-forge ([#&#8203;2210](https://github.com/gristlabs/grist-core/issues/2210)), postcss ([#&#8203;2316](https://github.com/gristlabs/grist-core/issues/2316)), lodash ([#&#8203;2238](https://github.com/gristlabs/grist-core/issues/2238)), fast-xml-parser ([#&#8203;2257](https://github.com/gristlabs/grist-core/issues/2257)), svgo ([#&#8203;2149](https://github.com/gristlabs/grist-core/issues/2149)), flatted ([#&#8203;2192](https://github.com/gristlabs/grist-core/issues/2192)), follow-redirects ([#&#8203;2264](https://github.com/gristlabs/grist-core/issues/2264)), dompurify ([#&#8203;2270](https://github.com/gristlabs/grist-core/issues/2270)), [@&#8203;xmldom/xmldom](https://github.com/xmldom/xmldom) ([#&#8203;2289](https://github.com/gristlabs/grist-core/issues/2289)) #### Contributions - Grist Labs: [@&#8203;berhalak](https://github.com/berhalak), [@&#8203;dsagal](https://github.com/dsagal), [@&#8203;paulfitz](https://github.com/paulfitz), [@&#8203;Spoffy](https://github.com/Spoffy) - [@&#8203;manuhabitela](https://github.com/manuhabitela): screen-reader support in grid views ([#&#8203;2114](https://github.com/gristlabs/grist-core/issues/2114)), keyboard access for row/column menus ([#&#8203;2230](https://github.com/gristlabs/grist-core/issues/2230)), keyboard access for the widget context menu ([#&#8203;2226](https://github.com/gristlabs/grist-core/issues/2226)), keyboard and screen-reader support in the page widget picker ([#&#8203;2273](https://github.com/gristlabs/grist-core/issues/2273)), custom CSS applied inside widgets ([#&#8203;2089](https://github.com/gristlabs/grist-core/issues/2089)), fine-tuning the experimental "New record" button ([#&#8203;2312](https://github.com/gristlabs/grist-core/issues/2312)), locale guessing and fallback improvements ([#&#8203;2313](https://github.com/gristlabs/grist-core/issues/2313)), console error fix on ctrl+alt+o ([#&#8203;2343](https://github.com/gristlabs/grist-core/issues/2343)) - [@&#8203;fflorent](https://github.com/fflorent): prevent anonymous users forking documents ([#&#8203;2319](https://github.com/gristlabs/grist-core/issues/2319)), bump file-type ([#&#8203;2209](https://github.com/gristlabs/grist-core/issues/2209)), document running the browser-based (nbrowser) tests locally ([#&#8203;2214](https://github.com/gristlabs/grist-core/issues/2214)) - [@&#8203;cbontemps](https://github.com/cbontemps): add new date formats ([#&#8203;2347](https://github.com/gristlabs/grist-core/issues/2347)) - [@&#8203;wvengen](https://github.com/wvengen): include package.json and yarn.lock for the Pyodide worker ([#&#8203;2297](https://github.com/gristlabs/grist-core/issues/2297)) - [@&#8203;machinelearningprodigy](https://github.com/machinelearningprodigy): tighten ISandbox types and resolve sort-spec lint/type-safety issues ([#&#8203;2211](https://github.com/gristlabs/grist-core/issues/2211)) ##### Translations - Arif Budiman - Igor Freire Rodrigues - Kévin DUPOND - Martin Harari Thuresson - Paul Janzen - Renato Portela - René Neumann - ssantos - xabirequejo - younger **Full Changelog**: <https://github.com/gristlabs/grist-core/compare/v1.7.13...v1.7.14> [Join our Discord Community](https://discord.gg/MYKpYQ3fbP) if you'd like to get into development of Grist. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMCIsInVwZGF0ZWRJblZlciI6IjQzLjIwNC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->
renovate added 1 commit 2026-05-30 03:04:41 +00:00
Update gristlabs/grist-oss Docker tag to v1.7.14 a5cab6c570
renovate force-pushed renovate/gristlabs-grist-oss-1.x from 16270a2cc9 to a5cab6c570 2026-05-30 03:04:41 +00:00 Compare
AverageMarcus merged commit 92d66145f3 into master 2026-05-30 05:35:41 +00:00
AverageMarcus deleted branch renovate/gristlabs-grist-oss-1.x 2026-05-30 05:35:42 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
renovate (Renovate Bot) AverageMarcus (Marcus Noble)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: AverageMarcus/cluster.fun#715
Delete Branch "renovate/gristlabs-grist-oss-1.x"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?